v155 · extensions · admin tool

ExtensionSettings policy composer

The policy JSON that triggers Chrome 155's attach-time gate, built interactively. Patterns are validated live against the real match-pattern grammar, and the output ships in the three formats admins actually deploy: Windows registry / GPO string, macOS plist fragment, and the Linux managed-policies JSON file.

1 · Scope and hosts

2 · Deployable output


    

      
      
    

  


  

    
3 · Verify on a managed machine

    
    
      
  1. Deploy, then check chrome://policy shows ExtensionSettings with status OK (press "Reload policies").
    2. 
      
  2. In Chrome 155+, an extension with the debugger permission calling chrome.debugger.attach() now fails immediately with "Host access is restricted by policy." — for every target, not just the listed hosts. That is the new deterministic contract.
    3. 
      
  3. Pre-155 the same policy produced per-command failures after a successful attach — replay the difference in the simulator.
    4. 
    

  


  
see also